SP3 — Three layers. No exceptions. Transport — TLS 1.3, x25519, AES-256-GCM Access — verified at the door A storage company should be boring Four commitments. None of them optional Zero breaches. One standard Accounts are onboarded individually